Free, no sign-up
A complete health check for your domain
One domain name, one score out of 100, and the exact list of what is fine, what deserves a look and what is broken — with the record to publish in order to fix it.
The tools, one by one
Every check in the report also exists as a standalone tool, with the full detail.
DNS and domain
DNS lookup
Every record type, with its TTL and the DNSSEC validation state.
Check →
Propagation
The same question asked of five public resolvers and of your authoritative servers.
Check →
Reverse lookup
From an IP address to its name, and a check that the round trip agrees.
Check →
Domain record
Availability, registrar, dates and locks, read from the registry RDAP.
Check →
Punycode / IDN
Conversion both ways, with detection of look-alike characters.
Check →
Mail server
MX, reverse DNS, FCrDNS, open ports, SMTP banner and the certificate served.
Check →
SPF
Analysis and generation, with the real count of DNS lookups triggered.
Check →
DKIM
Public key readout, length, algorithm and detection of revoked keys.
Check →
DMARC
Policy readout, guided generation and validation of report recipients.
Check →
MTA-STS
Policy, TXT record and a check that the policy is actually being served.
Check →
Email headers
Path taken, delays, authentication results. Analysed in your browser.
Check →
Security
DNSSEC
DS to DNSKEY chain, algorithms in use and confirmation that validation holds.
Check →
CAA
Which authorities may issue a certificate for this domain, and generation.
Check →